Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f76452a4-8ccc-4c8a-942f-baf700c10248.roa
File:                     f76452a4-8ccc-4c8a-942f-baf700c10248.roa (raw, json)
Hash identifier:          Iv8bcy1NAcfWuVmmaBhJjNB9yyFZBn00cKJqAPSwXto=
Subject key identifier:   CF:96:6B:CF:8E:E0:83:A2:F4:AD:FB:8F:11:C5:9A:42:22:FE:2D:C3
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1816283258BCAB17C12BEBCA1C7FBD41F381E719
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f76452a4-8ccc-4c8a-942f-baf700c10248.roa
Signing time:             Wed 22 Feb 2023 00:00:00 +0000
ROA not before:           Wed 22 Feb 2023 00:00:00 +0000
ROA not after:            Sat 25 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:16:28:32:58:bc:ab:17:c1:2b:eb:ca:1c:7f:bd:41:f3:81:e7:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 22 00:00:00 2023 GMT
            Not After : Feb 25 23:59:59 2023 GMT
        Subject: serialNumber=60bafc3d39fb2785409ab5b6af4bc0d30f1edc69537ddafa1f96e67c882023c0, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:93:fc:06:83:ea:34:e9:b2:8f:0c:1a:f9:0b:
                    ce:90:46:80:0c:b7:1f:e0:ac:78:17:41:e6:c7:de:
                    4c:7c:4f:de:96:c1:91:3b:b9:ad:36:ad:96:e3:01:
                    b7:c1:73:a8:3d:12:59:21:36:fe:f4:a1:94:33:83:
                    76:8b:68:af:36:ec:50:24:28:25:35:36:80:af:19:
                    19:8d:71:93:2e:fb:68:21:34:80:50:90:b2:10:66:
                    23:65:35:68:67:22:9f:5f:fa:59:52:a6:0d:9f:61:
                    16:6c:2c:9c:9d:b6:52:1c:5e:28:a5:90:a2:b9:2b:
                    74:49:26:1d:df:2c:5d:96:3c:14:d1:11:05:6b:0d:
                    16:eb:4c:c5:38:6f:7a:76:ce:b1:40:2c:36:2f:d1:
                    a5:9d:b0:5b:ff:2d:3e:d0:2f:f6:a6:6f:f8:af:81:
                    56:42:33:e0:6b:07:b1:b4:6c:04:f9:57:15:35:e6:
                    ee:e0:bd:bf:cd:1b:23:01:bd:25:7a:15:4f:e3:3a:
                    01:8d:8f:fa:d4:e3:a2:4b:f6:62:76:fa:c4:a7:61:
                    11:53:28:58:c3:93:05:cf:a1:d9:d9:03:c7:4f:ac:
                    90:2c:d5:09:25:f3:b4:01:9d:e6:35:6e:90:22:ec:
                    95:a5:d0:38:c1:d9:f4:91:29:a7:17:e9:1c:2a:c8:
                    00:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:96:6B:CF:8E:E0:83:A2:F4:AD:FB:8F:11:C5:9A:42:22:FE:2D:C3
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/f76452a4-8ccc-4c8a-942f-baf700c10248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:54:81:8a:22:d9:03:6c:a8:84:4c:72:bd:a2:7b:42:a3:20:
         41:0d:ae:3f:a1:b8:c3:f3:9a:33:91:0f:75:66:45:c9:24:cb:
         13:23:be:e8:82:77:a1:cb:2f:b5:ab:63:2c:3d:ad:bb:ab:da:
         2b:25:10:07:35:5b:95:4c:96:8e:cf:90:64:10:1d:f7:e2:1c:
         09:03:fe:17:35:6a:c4:2e:63:cc:07:0e:0e:91:15:d0:b5:1d:
         07:23:4e:52:be:20:96:47:c1:53:83:bb:93:4e:7d:f5:61:20:
         81:f9:a0:c2:3f:dc:29:07:d8:cf:52:ce:6f:82:2f:f8:7d:89:
         ee:8d:76:9a:d4:58:76:41:fc:ee:03:4e:08:12:87:81:f1:2c:
         fb:00:52:46:1f:90:c8:92:19:de:fd:d3:a7:48:7e:58:6d:1a:
         80:54:b8:81:f4:b7:31:1f:17:62:0e:5d:40:16:a0:5e:54:ac:
         94:bc:25:1a:db:6b:fd:84:89:a4:d1:06:7e:ab:1b:63:e3:95:
         6a:04:10:37:70:9b:14:6d:52:d4:59:dd:a0:cd:bd:99:8e:3e:
         ea:73:54:a0:a3:71:1f:25:18:13:98:e3:69:28:65:c9:d2:79:
         8d:92:03:26:92:32:18:05:1d:cb:c1:c5:c2:e8:b2:fa:9f:eb:
         af:94:c2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----